Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
File: 7eab64af-78b7-3d87-9f08-54d27ec7277e.roa (raw, json)
Hash identifier: ZS29LMgB8dZzfM2YeqZmotZN3+dk5DYKbPWBXLa647E=
Subject key identifier: AD:8B:FC:61:3D:2C:06:3D:5D:80:DA:B6:A7:5A:A8:B1:A5:42:1D:53
Certificate issuer: /CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Certificate serial: 010D0C9F43285848100A7A2145AF6FCA0A468560
Authority key identifier: 67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 7034
IP address blocks: 23.152.160.0/24 maxlen: 24
2620:13b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7a:21:45:af:6f:ca:0a:46:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d4a510-1468-46e8-beaf-e6681a1190c5
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=0a1b3cf7-c120-4f44-8cdc-e1e8597a51cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:11:7e:f3:5e:37:ab:a7:4b:58:be:f6:cf:
c4:b4:7e:ab:cf:8b:50:ff:a1:5c:86:6e:6d:26:11:
da:03:a6:72:91:c4:2d:b9:9e:f5:3c:1d:e2:99:4b:
1a:5f:98:1f:c7:28:d8:71:b5:77:4f:71:c1:bd:36:
5b:b3:8f:70:f7:37:dc:01:b9:dc:7e:9a:73:9a:87:
c2:4e:a7:cc:7a:f7:08:1f:0a:a3:27:c4:02:c3:68:
4b:5c:88:55:28:a9:de:4d:c1:4f:7b:02:0b:87:d5:
18:61:0a:e7:94:4f:14:74:08:5d:70:27:ba:73:0c:
07:c3:68:91:7b:9e:a7:1d:14:9b:d2:70:04:f8:3f:
6a:60:13:b7:0c:aa:51:15:09:e6:be:2e:82:fc:e2:
2c:68:f3:24:45:c8:e5:df:42:fa:14:ec:0a:4a:88:
1c:93:3b:ce:2d:4f:c9:21:ef:87:72:c3:d3:ce:ed:
ec:e2:d8:9a:60:8e:59:3f:17:cd:e7:9b:c1:9e:06:
71:2a:09:90:46:16:af:59:51:d1:42:40:a1:6c:45:
bb:a8:1f:69:2c:d1:c3:e4:57:9f:9b:0f:25:28:87:
4e:14:71:de:a3:5f:df:77:f2:6e:53:a2:b1:07:f9:
99:fe:f6:e3:64:f4:bc:18:5e:d8:ab:13:de:24:a1:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8B:FC:61:3D:2C:06:3D:5D:80:DA:B6:A7:5A:A8:B1:A5:42:1D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/7eab64af-78b7-3d87-9f08-54d27ec7277e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5/c0d4a510-1468-46e8-beaf-e6681a1190c5.crl
X509v3 Authority Key Identifier:
keyid:67:DF:96:60:0B:8C:9F:22:B3:83:1E:4A:BE:DF:E4:1E:31:42:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c0d4a510-1468-46e8-beaf-e6681a1190c5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.160.0/24
IPv6:
2620:13b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:b2:6b:07:05:da:31:aa:0d:15:d3:bf:c0:5b:20:ed:7c:c7:
7d:86:bf:ce:2f:4a:4b:46:22:a1:10:c7:0d:e3:2b:50:7c:c9:
a7:95:d0:37:d5:22:ba:86:3b:90:d2:d6:60:4e:f2:c5:12:ad:
f2:40:4f:9f:0d:6c:7d:94:a6:f7:d4:c3:a9:d7:4c:e1:97:ca:
a7:ba:7e:e4:0a:a5:de:3f:b0:0b:be:8c:58:18:bd:82:73:44:
19:53:a9:4e:d1:4f:44:58:7a:bc:ba:56:91:a9:d6:0d:62:87:
ce:e3:bb:cd:d1:58:41:76:27:1f:7c:5e:c6:92:14:83:53:9c:
af:ea:78:c7:8c:ec:a4:9e:b3:85:fa:ea:12:4a:15:72:db:d1:
2b:7d:66:c4:10:2f:fc:61:7b:0a:a3:02:46:80:ee:34:be:e9:
44:fc:7b:fa:73:74:63:95:d2:30:47:f2:58:e6:53:a3:2d:a2:
95:3e:88:3e:ed:5d:c3:1e:5a:83:0f:a4:97:b2:99:84:91:07:
38:27:15:b9:4e:61:dc:2e:e4:52:91:37:01:ae:4c:b5:84:79:
64:e6:ae:35:6e:18:ae:09:65:87:92:fa:8a:01:04:c9:50:9a:
83:0c:a3:c3:5a:e3:7f:e9:ce:67:35:85:9a:0a:fe:55:5a:9e:
2a:69:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:10:30 2025 by rpki-client